Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: qyTyKJvX024F6n48Y3lIGBU8VHVqGyBES9O0QxAAP5E=
Subject key identifier: 87:45:D9:38:A4:09:D2:59:27:B2:6C:E4:A0:5F:28:A5:10:8D:4C:FC
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019EBF5A5F19DBBAB36E86800534C9A87542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 043B
Signing time: Sat 13 Jun 2026 05:00:31 +0000
Manifest this update: Sat 13 Jun 2026 05:00:31 +0000
Manifest next update: Sun 14 Jun 2026 05:00:31 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: RSQfMEEZt4oequ_NHljzft1mAes.roa (hash: L34nif9bVdt4hPPgw1teVUpRnSBpGBSyzLRTZAC7pv8=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: rPJN79QypNnZJDidA6VkDmg1mJGP7pZuuBK44MbyTQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:5f:19:db:ba:b3:6e:86:80:05:34:c9:a8:75:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Jun 13 05:00:31 2026 GMT
Not After : Jun 14 05:00:31 2026 GMT
Subject: CN=8745d938a409d25927b26ce4a05f28a5108d4cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:aa:ed:31:d7:6b:ab:37:0e:ea:8e:10:46:
c5:c1:c7:a3:0d:cd:6a:ea:98:45:b6:06:63:94:e2:
45:80:7a:bb:18:63:e6:ec:76:45:d5:6b:ff:ba:e5:
4a:b4:9d:f8:68:d6:eb:9d:45:02:b8:c6:93:53:7e:
88:57:c4:47:dd:5c:17:8f:dc:04:23:1b:7d:b8:99:
cb:b5:99:6e:6a:e3:77:75:42:6d:00:2d:9d:9c:f0:
80:68:fb:4f:c4:99:68:17:c1:52:2d:56:14:d3:f5:
24:8b:ab:8a:e0:97:f5:f4:d6:70:de:bc:7a:c5:84:
16:75:b7:e5:55:f8:42:60:bc:26:2a:a9:71:68:2a:
a1:26:a4:9a:f2:ca:c5:46:3c:61:5e:55:5f:63:f0:
07:8a:3e:a3:d5:40:4a:5b:e7:08:9e:4e:43:f6:00:
1e:9f:6f:89:5a:f8:88:c3:ef:cf:ba:90:b7:ed:8b:
7d:a1:b7:2b:2b:2b:d9:39:21:b2:7e:1a:e2:9d:1c:
28:e1:57:9c:2c:d4:8d:12:bc:08:9b:e7:6c:ac:d5:
da:98:5f:b8:42:07:0c:e0:f0:23:ec:5a:49:4e:57:
f1:93:ec:31:ef:4d:d3:b8:9e:48:6c:10:b4:ed:20:
7e:81:59:9c:11:78:4a:b9:ef:c7:4e:f1:89:a5:b3:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:45:D9:38:A4:09:D2:59:27:B2:6C:E4:A0:5F:28:A5:10:8D:4C:FC
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:54:7e:4c:a9:2e:e3:93:cc:86:e3:e5:78:7e:ef:de:3a:bd:
1b:61:77:ed:fd:f7:a9:da:a6:5e:a3:18:02:9a:c9:ba:95:54:
24:84:10:d3:84:50:91:09:0d:44:d3:76:97:14:99:a1:e4:f3:
0c:1f:43:33:1d:13:89:da:03:42:db:d3:c1:5c:f9:30:e2:c0:
f9:c2:1c:d3:43:6c:74:3d:fd:92:c3:c4:50:46:1a:03:42:b7:
44:26:ef:1e:5b:4d:e2:34:55:6c:4f:a4:76:e5:cd:3c:ff:c3:
8f:68:89:37:76:2e:38:c0:03:5e:fd:79:8b:2b:de:b6:fd:89:
c8:bb:0b:3b:36:d3:e4:e3:0a:ae:cc:e1:b8:7f:8f:48:70:93:
af:28:c6:a7:de:57:16:84:d7:f2:6a:14:dc:86:6e:a4:15:42:
64:23:38:2a:15:57:d2:c1:b4:04:06:77:58:3e:79:83:83:a5:
5c:e7:03:77:a9:9a:d4:fe:35:0c:61:42:27:11:5e:7d:58:12:
c8:75:d9:92:18:90:95:f8:ad:0d:e4:09:e4:f1:ea:b2:b9:f2:
d9:82:2d:ad:1e:fd:6a:3e:0f:05:15:b5:a7:5f:a9:ad:0d:68:
72:81:36:92:05:e7:7a:7c:87:5a:2d:19:ca:8a:25:17:84:54:
d7:46:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:22:04 2026 by rpki-client